Let's just hope DLflyer themselves isn't the burglar since they have all our PNR/Name combos we tested.
(Related, hope you aren't in Missouri. Wasn't there where the governor tried to absurdly prosecute someone for showing data that was exposed in the html code? )